Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.2
Red Hat Hardened Images for Linux: Potential Root Access via Container Escalation
published 6 months ago
Summary
A vulnerability in Red Hat's Hardened Images for Linux could allow an attacker to gain root access to a container. This could happen if an attacker can manipulate the container's network settings. Users should update their Red Hat Hardened Images to the latest version to fix this issue.
What to do
- Update redhat openssh to version 0:10.2p1-9.hum1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:hummingbird:1 | redhat | openssh |
< 0:10.2p1-9.hum1 Fix: upgrade to 0:10.2p1-9.hum1
|
Original advisory text
Red Hat Security Advisory: Red Hat Hardened Images RPM Release
References
- https://ubuntu.com/security/CVE-2026-3497 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:5475 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2025-61985 Third Party Advisory
- https://access.redhat.com/security/updates/classification/ Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2025-61984 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-3497 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_5475.j... Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2401960 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-61984 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-61984 Vendor Advisory
- https://marc.info/?l=openssh-unix-dev&m=175974522032149&w=2 Third Party Advisory
- https://www.openssh.com/releasenotes.html#10.1p1 Third Party Advisory
- https://www.openwall.com/lists/oss-security/2025/10/06/1 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2401962 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-61985 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-61985 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2447085 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-3497 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-3497 Vendor Advisory
- https://www.openwall.com/lists/oss-security/2026/03/12/3 Third Party Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published20 Apr 2026
Updated27 Apr 2026
First seen27 Apr 2026
Sources
RHSA-2026:5475 · OSV
Track software like this
Free during beta